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DETAILED ACTION 
Election/Restrictions 

1 . Applicant's election without traverse of Species 2 in the reply filed on 02 February 2007 
is acknowledged. 

2. Claims 2-4, 14, 15, and 19 are withdrawn from further consideration pursuant to 37 CFR 
1. 142(b) as being drawn to a nonelected species, there being no allowable generic or linking 
claim. Election was made without traverse in the reply filed on 02 February 2007. 

Claim Rejections - 35 USC §102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b). by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

4. Claims 1, 5, 7-13, 16-18, 20-22 are rejected under 35 U.S.C. 102(e) as being anticipated 
by Dor, U.S. Publication No. 2004/0088551. Referring to claim 1, Dor discloses a system where 
credit transactions to a vending machine are approved with the use of a response computer and a 
user cellular phone when the user does not use their actual credit card ([0015] & [0128] & [0137] 
&[0140]). Any user that wishes to use the service must have an account with a service provider 
and possess a cell phone that is registered with the vendors ([0128] & [0136]-[0137]), which 
meets the limitation of at least one record that includes information about the individual, the 
information including information about the individual's personal communications device. The 
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approving agency has a user database of information containing the cell phone information and 
credit account information that is used to verify the user ([0137] & [0140]), which meets the 
limitation of a controller having access to the at least one record wherein the controller is in 
communication with one or more secure components and wherein the controller, in response to 
receiving a signal indicating that the individual seeking access to the one or more secure 
components does not have their access device, retrieves information about the individual's 
personal communications device. The response computer sends to the customer's cell phone a 
unique transaction code that is to be entered into the vending machine's keypad to enable 
retrieval of the purchased merchandise ([0140]), which meets the limitation of sending an 
alternate access code to the individual and then subsequently evaluates whether the individual 
has provided the alternate access code back to the controller correctly to determine whether to 
permit access to the secure component, a communications interface that allows signals between 
the individual's communication device and the controller, wherein the controller uses the 
communications interface and the individual's personal communications device to allow the 
individual to receive or transmit the alternate access code to the controller. 

Referring to claim 9, Dor discloses a system where credit transactions to a vending 
machine are approved with the use of a response computer and a user cellular phone when the 
user does not use their actual credit card. ([0015] & [0128] & [0137] &[0140]), which meets the 
limitation of a system for limiting access to at least one secure component having an associated 
access device reader to only authorized individuals, wherein the system permits access to the at 
least one secure component when an individual provides an access device to the access device 
reader that is recognized as an authorized access device wherein when the individual provides an 
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indication to the system that the individual does not possess an authorized access device, the 
system communicates with a personal communication device. Any user that wishes to use the 
service must have an account with a service provider and possess a cell phone that is registered 
with the vendors ([0128] & [0136]-[0137]) 5 which meets the limitation of the personal 
communications device registered to the individual. The approving agency has a user database of 
information containing the cell phone information and credit account information that is used to 
verily the user ([0137] & [0140]), which meets the limitation of verifying the individual through 
the use of the personal communications device. 

Referring to claims 8, 10, 11, Dor discloses that the response computer will have cellular 
reference numbers of credit account holders stored, in association with data related to the 
account holders ([0137]), which meets the limitation of the system includes a record of personal 
communications devices belonging to authorized individuals, the record comprises telephone 
numbers for the individual's cellular telephone. 

Referring to claims 5, 7, 12, 13, Dor discloses that the response computer sends to the 
customer's cell phone a unique transaction code that is to be entered into the vending machine's 
keypad to enable retrieval of the purchased merchandise ([0140]), which meets the limitation of . 
the identity of the individual is verified by sending an access code to the individual's personal 
communication device and inducing the individual to transmit the access code back to the 
system, the at least one secure component has a user input through which the individual can 
input the access code provided to the individual's personal communications device, the 
controller sends the alternate access code to the individual via the individual's personal 



Application/Control Number: 10/648,150 Page 5 

Art Unit: 2132 

communications device, the controller receives the alternate access code from the individual via 
the secured component. 

Referring to claims 16, 21, 22, Dor discloses a system where credit transactions to a 
vending machine are approved with the use of a response computer and a user cellular phone 
when the user does not use their actual credit card ([0015] & [0128] & [0137] &[0140]), which 
meets the limitation of receiving a signal from an individual indicating that the individual does 
not have their access device for access to the secured component. Any user that wishes to use the 
service must have an account with a service provider and possess a cell phone that is registered 
with the vendors ([0128] & [0136]-[0137]), which meets the limitation of communicating with a 
personal communications device registered to the individual. The approving agency has a user 
database of information containing the cell phone information and credit account information 
that is used to verify the user ([0137] & [0140]). The response computer sends to the customer's 
cell phone a unique transaction code that is to be entered into the vending machine's keypad to 
enable retrieval of the purchased merchandise ([0140]), which, meets the limitation of verifying 
the individual's identity based upon the communications with the individual's personal 
communications device, allowing access upon verification of the individual's identity, access is 
allowed when the individual transmits an appropriate access code and communication is 
established with the individual's personal communications device. 

Referring to claim 17, Dor discloses that initialization of the transaction can occur from a 
vendor terminal ([0137]-[0138]), which meets the limitation of receiving a signal from an 
individual comprises receiving a signal from a user interface associated with the secure 
component. 
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Referring to claim 18, Dor discloses that the response computer sends to the customer's 
cell phone a unique transaction code that is to be entered into the vending machine's keypad to 
enable retrieval of the purchased merchandise ([0140]), which meets the limitation of sending an 
access code to the individual's personal communications device, receiving a signal from the 
individual, and evaluating the signal received from the individual to ascertain whether the signal 
includes the access code. 

Referring to claim 20, Dor discloses that initialization of the transaction can occur from a 
vendor terminal ([0137]-[0138]), which meets the limitation of receiving a signal from an 
individual comprises receiving a signal from a user interface associated with the secure 
component. 

Claim Rejections - 35 USC §J03 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

6. The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 148 USPQ 459 
(1966), that are applied for establishing a background for determining obviousness under 35 
U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating obviousness 
or nonobviousness. 
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7. Claim 6 is rejected under 35 U.S.C. 103(a) as being unpatentable over Dor, U.S. 
Publication No. 2004/0088551. Referring to claim 6, Dor discloses that the response computer 
sends to the customer's cell phone a unique transaction code that is to be entered into the 
vending machine's keypad to enable retrieval of the purchased merchandise ([0140]). Dor does 
not expressly disclose that the customer could use the cell phone to transmit the unique 
transaction code back to the response computer. Dor does suggest that the customer enters other 
authentication information into their cell phone, such as a password ([0140]). Therefore, it would 
have been obvious to one of ordinary skill in the art at the time the invention was made for the 
user to input the unique transaction code into the cell phone for transmission back to the response 
computer for authentication in order to verify that the user receiving the code is the user being 
authenticated. Such an authentication scheme would also reduce the likelihood of an exhaustive 
attack on the vending machine, because the malicious attackers would not be able to sit a punch 
in all possible codes into the vending machine if no interface was necessary. 

Conclusion 

8. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

Turtiainen, U.S. Patent No. 6,430,407 
Maes, U.S. Patent No. 6,016,476 

9. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Benjamin E. Lanier whose telephone number is 571-272-3805. 
The examiner can normally be reached on M-Th 7:30am-5:00pm, F 7:30am-4pm. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. 'Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



